The pattern \{(\w+)\} captures one identifier-like token between braces, and replace runs once per match. Falling back to the original match when the key is absent leaves the placeholder visible, which is usually what you want during development because it surfaces missing translation keys instead of silently emitting 'undefined'. Numbers, booleans, and other primitives get coerced to strings via String(values[key]), so passing { amount: 19.99 } works without ceremony. Reach for this whenever you need template-style strings in a CLI tool, an i18n shim, or a log formatter.

The minimal version cannot output literal { and } characters, which matters when your template is itself a code sample, a CSS rule, or a JSON snippet. The classic fix is the same trick handlebars uses: doubled braces {{ and }} mean literal output. Masking them with control characters first (\u0001, \u0002) means the substitution pass cannot accidentally re-process them, then we unmask after substitution. The control-character technique avoids the harder approach of building one mega-regex with negative lookbehinds, which is also slower in V8.

Tagged template literals are JavaScript's built-in templating: a function tag receives the static string parts and the interpolated values as separate arrays. The fmt tag keeps it simple by stringifying each value and treating null/undefined as empty, which avoids the surprise of 'null' or 'undefined' showing up in production strings. The safeHtml extension shows the bigger win: the tag function sees the values BEFORE concatenation, so it can sanitise each one independently and you cannot accidentally bypass it by changing the template. Variables are renamed (name3, etc.) to avoid collision with earlier accordions in this snippet's combined sandbox. Use this approach for typed templates, sanitising tags (safeHtml, safeSql), or DSLs like styled-components.